Format: 1.8 Date: Fri, 10 Jul 2020 10:57:06 -0300 Source: snapd Binary: snap-confine snapd snapd-xdg-open ubuntu-core-launcher Architecture: arm64 arm64_translations Version: 2.45.1+19.10.2 Distribution: eoan Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Emilia Torino Description: snap-confine - Transitional package for snapd snapd - Daemon and tooling that enable snap packages snapd-xdg-open - Transitional package for snapd-xdg-open ubuntu-core-launcher - Transitional package for snapd Launchpad-Bugs-Fixed: 1880085 Changes: snapd (2.45.1+19.10.2) eoan-security; urgency=medium . * SECURITY UPDATE: sandbox escape vulnerability via snapctl user-open (xdg-open) - usersession/userd/launcher.go: remove XDG_DATA_DIRS environment variable modification when calling the system xdg-open. Patch thanks to James Henstridge - packaging/ubuntu-16.04/snapd.postinst: kill userd on upgrade so it may autostart on next use. Patch thanks to Michael Vogt - CVE-2020-11934 - LP: #1880085 Checksums-Sha1: 68bf80514dcf1ebd8f16d44d988834775ac8a923 1804 snap-confine_2.45.1+19.10.2_arm64.deb 062f2fda4ed8f655f6ed162681b4a283909522bc 19306892 snapd-dbgsym_2.45.1+19.10.2_arm64.ddeb 7e4e088fb9a6cfc2fd298a4be63a6e17b7b9d10c 1648 snapd-xdg-open_2.45.1+19.10.2_arm64.deb 38e1d39464b8e84936eba8d228c7f89ab29a9ed4 10913 snapd_2.45.1+19.10.2_arm64.buildinfo b9344f6b46f9805f4e476bcd21046166ea281eab 24407728 snapd_2.45.1+19.10.2_arm64.deb 3c4d978d255fd594258d0ffd806c0703ec2150e1 901268 snapd_2.45.1+19.10.2_arm64_translations.tar.gz 9f7ed8972d96da6c81970bc48e9c123eaa8430f5 1652 ubuntu-core-launcher_2.45.1+19.10.2_arm64.deb Checksums-Sha256: 2dfedcbfe72af543c04693520ea2f44190b24adbdbdd0b5ab89779c00700fc1c 1804 snap-confine_2.45.1+19.10.2_arm64.deb bfb7ce5256fc0c387be113e0201e5eaa38e2b3773baa9c9892a02e3a04940166 19306892 snapd-dbgsym_2.45.1+19.10.2_arm64.ddeb 278d8d319525a3f3fa4be5822891ccf3862dd52e302822b42e7e316b5b5c1f4d 1648 snapd-xdg-open_2.45.1+19.10.2_arm64.deb c05ea8760e568e85111977d8b620aaca6f91a0238a56c1bdd5c8f8214100091f 10913 snapd_2.45.1+19.10.2_arm64.buildinfo 32ad6913e931d14ab7e39208c86f545083805be53086e63a4cbc7fa8b547f0c0 24407728 snapd_2.45.1+19.10.2_arm64.deb ee538c352d5171340c9efcff4b1d05cc219947e1d6536ee0ad1d9bcd3be83006 901268 snapd_2.45.1+19.10.2_arm64_translations.tar.gz c0b0bc4edae463b22989d9539bd754a63b4a89ccc54cee593e3e16a5af5cbd5e 1652 ubuntu-core-launcher_2.45.1+19.10.2_arm64.deb Files: e7a9a03165af46095c32e6b41608cff8 1804 oldlibs optional snap-confine_2.45.1+19.10.2_arm64.deb 81faa2ecad1b7ea272315692a33aaa3d 19306892 debug optional snapd-dbgsym_2.45.1+19.10.2_arm64.ddeb 390785ddf56c71105e5c48a8cf857694 1648 oldlibs optional snapd-xdg-open_2.45.1+19.10.2_arm64.deb 9e5d15e136afa0ecd960db2630bb5911 10913 devel optional snapd_2.45.1+19.10.2_arm64.buildinfo 74041f5b3d4157df1f0a2051ed105012 24407728 devel optional snapd_2.45.1+19.10.2_arm64.deb 2d4702c4c3e66187fda40c13430c68b4 901268 raw-translations - snapd_2.45.1+19.10.2_arm64_translations.tar.gz e6bdcd5d9df13bd47b899d16cd63685b 1652 oldlibs optional ubuntu-core-launcher_2.45.1+19.10.2_arm64.deb